Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

I Found a P0 Auth Bypass by Testing What null Does to BCrypt

While building SCIP — a supply chain platform with 90+ Spring Boot REST endpoints — I was boundary-testing the auth flow when I noticed something that shouldn't have been possible.

  • Null password bypass authenticated with any password
  • SCIP supply chain platform with 90+ Spring Boot REST endpoints
  • Fix implemented by adding null guard before BCrypt execution

The Translate Button Is Declarative; the Community Workflow Is Not

A translation button can make multilingual community chat look solved. The user clicks, translated text appears, and the implementation seems almost too easy to count as serious engineering.

  • Translate button is declarative UI element, not translation process
  • Workflow includes recording requests, handling failures and changes
  • Six rules govern translation system architecture and operation

More from Monday 24 August →